$ rpki-client -vvvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjBTQfigfQiWy3QNGoKGG32qO6E.cer File: QjBTQfigfQiWy3QNGoKGG32qO6E.cer (raw, json) Hash identifier: oeEzr2x7sHhiv4uCq/YgSa5r5ABEi2F0L3xgJch+EHE= Subject key identifier: 42:30:53:41:F8:A0:7D:08:96:CB:74:0D:1A:82:86:1B:7D:AA:3B:A1 Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Certificate serial: 02E0D7 Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer CRL Distribution Point: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Manifest: rsync://rpki.apnic.net/member_repository/A91BF64A/E30F8FECD27F11F1A832730A2E66CEF9/QjBTQfigfQiWy3QNGoKGG32qO6E.mft caRepository: rsync://rpki.apnic.net/member_repository/A91BF64A/E30F8FECD27F11F1A832730A2E66CEF9/ Notify URL: https://rrdp.apnic.net/notification.xml Certificate not before: Wed 28 Oct 2026 03:30:17 +0000 Certificate not after: Fri 30 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 43.229.60.0/22 IP: 103.230.156.0/22 Validation: OK Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 17:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188631 (0x2e0d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F Validity Not Before: Oct 28 03:30:17 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=A91BF64A, serialNumber=42305341F8A07D0896CB740D1A82861B7DAA3BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:4a:62:e1:5f:8a:92:62:54:f8:94:be:1f: a6:81:3a:6f:d7:cf:c3:cd:f1:39:b2:0e:90:03:8c: 04:69:ad:ee:c5:77:e7:19:82:87:60:ab:df:92:15: de:b2:f0:73:6f:1b:11:07:1d:b3:a0:1a:20:9f:6a: 05:6f:da:e4:ae:2d:6a:fe:a7:82:2f:65:9d:db:6a: eb:46:5e:44:da:7e:d8:ee:eb:ee:3b:05:94:34:81: 94:51:07:5c:ef:0c:68:b6:a3:51:cf:cb:d8:cc:d1: e0:d3:8f:b4:d8:b2:ac:09:a5:df:a8:ec:09:1e:50: 50:0f:ca:99:02:dc:61:15:47:03:a4:79:1d:85:16: 93:43:0b:b5:5e:e2:4b:f9:f9:84:83:25:72:17:32: 9d:18:3a:5d:6e:14:dc:65:a0:fc:75:16:fd:69:18: b5:c4:dd:f1:ea:02:1c:79:87:46:11:bd:a9:08:f7: 14:b3:49:2b:b9:9f:54:58:7d:2c:53:8f:38:64:5b: dd:da:2e:ed:93:ef:64:51:be:c0:fb:2e:55:7c:03: b7:9a:95:a0:87:59:90:7f:00:8c:f8:c5:c9:0d:3b: 6b:26:61:ed:4a:54:d2:92:ee:ed:86:a3:05:12:44: ca:be:b8:10:34:ce:5e:a8:2d:08:df:99:ad:9f:36: 06:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:53:41:F8:A0:7D:08:96:CB:74:0D:1A:82:86:1B:7D:AA:3B:A1 X509v3 Authority Key Identifier: keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91BF64A/E30F8FECD27F11F1A832730A2E66CEF9/ RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91BF64A/E30F8FECD27F11F1A832730A2E66CEF9/QjBTQfigfQiWy3QNGoKGG32qO6E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.60.0/22 103.230.156.0/22 Signature Algorithm: sha256WithRSAEncryption 96:93:fe:b7:f2:45:fa:8a:b3:e1:82:94:74:9f:41:17:97:cc: a1:0c:c0:4b:8c:46:3e:0c:0b:6c:70:f7:72:47:4a:d4:90:27: f7:19:10:42:a8:37:f4:17:27:ae:fb:3b:2c:2f:fb:41:c7:fe: 7a:b5:97:a8:cb:6d:eb:bb:4b:56:fb:e1:89:f6:d5:63:0c:30: b9:a6:3c:38:cd:46:25:24:44:51:30:92:3f:75:91:46:15:dd: b8:9c:e6:55:61:e0:22:2c:93:3f:44:bb:30:2a:19:c7:a8:83: e2:05:08:c2:cc:1c:f2:68:41:77:4d:70:6b:77:ac:de:5d:f5: f4:9d:87:19:3b:5b:30:30:61:1c:a4:ab:84:6d:94:85:56:3c: 3e:0a:79:c0:74:ba:95:bd:d6:88:7e:dd:3a:01:df:59:c8:ff: 80:91:76:f5:66:63:af:39:8d:0a:c4:e9:84:eb:c1:11:c6:b3: 3c:13:06:d6:c3:0f:0c:e8:4e:de:75:52:64:79:73:fb:d5:5d: 4e:57:cb:06:47:61:0a:34:da:ea:06:25:10:d0:d6:58:dc:e5: cf:23:90:fa:cf:76:d9:f4:47:f8:c3:03:4d:18:bb:74:5a:e9: 0c:d2:22:a4:a1:d7:36:dc:9c:0e:f0:7c:9b:ce:dd:9b:5f:c9: f3:9f:85:09 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgIDAuDXMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MERDNUJFMTEwLwYDVQQFEygwRTY1QTRGNUZEMzZCNUJENjhFQjNDOTIzNDA4OTc4 QzkwN0FBNzlGMB4XDTI2MTAyODAzMzAxN1oXDTI3MDczMDAwMDAwMFowRjERMA8G A1UEAxMIQTkxQkY2NEExMTAvBgNVBAUTKDQyMzA1MzQxRjhBMDdEMDg5NkNCNzQw RDFBODI4NjFCN0RBQTNCQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBCkpi4V+KkmJU+JS+H6aBOm/Xz8PN8TmyDpADjARpre7Fd+cZgodgq9+SFd6y 8HNvGxEHHbOgGiCfagVv2uSuLWr+p4IvZZ3bautGXkTaftju6+47BZQ0gZRRB1zv DGi2o1HPy9jM0eDTj7TYsqwJpd+o7AkeUFAPypkC3GEVRwOkeR2FFpNDC7Ve4kv5 +YSDJXIXMp0YOl1uFNxloPx1Fv1pGLXE3fHqAhx5h0YRvakI9xSzSSu5n1RYfSxT jzhkW93aLu2T72RRvsD7LlV8A7ealaCHWZB/AIz4xckNO2smYe1KVNKS7u2GowUS RMq+uBA0zl6oLQjfma2fNgZ1AgMBAAGjggL5MIIC9TAdBgNVHQ4EFgQUQjBTQfig fQiWy3QNGoKGG32qO6EwHwYDVR0jBBgwFoAUDmWk9f02tb1o6zySNAiXjJB6p58w DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wcwYDVR0fBGwwajBooGag ZIZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2 NjExRTJCQjQ2OEY3QzcyRkQxRkYyL0RtV2s5ZjAydGIxbzZ6eVNOQWlYakpCNnA1 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvOTgwNjUyRTBCNzdFMTFFN0E5NkEzOTUyMUE0 RjRGQjQvRG1XazlmMDJ0YjFvNnp5U05BaVhqSkI2cDU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwggEoBggrBgEFBQcBCwSCARowggEWMF8GCCsGAQUF BzAFhlNyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MUJGNjRBL0UzMEY4RkVDRDI3RjExRjFBODMyNzMwQTJFNjZDRUY5LzB+BggrBgEF BQcwCoZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9B OTFCRjY0QS9FMzBGOEZFQ0QyN0YxMUYxQTgzMjczMEEyRTY2Q0VGOS9RakJUUWZp Z2ZRaVd5M1FOR29LR0czMnFPNkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3Jy ZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8EFjAU MBIEAgABMAwDBAIr5TwDBAJn5pwwDQYJKoZIhvcNAQELBQADggEBAJaT/rfyRfqK s+GClHSfQReXzKEMwEuMRj4MC2xw93JHStSQJ/cZEEKoN/QXJ677Oywv+0HH/nq1 l6jLbeu7S1b74Yn21WMMMLmmPDjNRiUkRFEwkj91kUYV3bic5lVh4CIskz9EuzAq Gceog+IFCMLMHPJoQXdNcGt3rN5d9fSdhxk7WzAwYRykq4RtlIVWPD4KecB0upW9 1oh+3ToB31nI/4CRdvVmY685jQrE6YTrwRHGszwTBtbDDwzoTt51UmR5c/vVXU5X ywZHYQo02uoGJRDQ1ljc5c8jkPrPdtn0R/jDA00Yu3Ra6QzSIqSh1zbcnA7wfJvO 3ZtfyfOfhQk= -----END CERTIFICATE-----Generated at Sun Nov 15 21:22:40 2026 by rpki-client